Under what legal jurisdiction(s) does IT Security operate, and what are the compliance issues?

This is mainly a response to Stackexchange site on Reverse Engineering but it caused me to think about other potential legal issues.

For example. If posting specific vulnerability information for software X is against the law in country Y, does IT security have any legal compliance issues?

3 Answers 3


As far as I'm aware, everything for StackExchange operates from New York, NY, USA. Other than my best guess, that's a question that their legal rep would need to chime in on.


Very interesting question - I'd be tempted to say that you'd end up with joint liability in many cases so the individual who posted, and SE may be liable for legal infractions.

but I am not a lawyer - I am interested in any input from those who are...


I feel that a legal.SE site might be needed some time in the future, that would be kind of handy anyways =p

However, I did do some reading.. this would be great in concept, but there is a difference between a novice programmer giving you some bad advice that just messes up a program, and a novice "lawyer" giving you "legal advice" that lands you in jail

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .